Static task
static1
Behavioral task
behavioral1
Sample
9992e25173a67c7aa14d90537379fc6e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9992e25173a67c7aa14d90537379fc6e.exe
Resource
win10v2004-20231215-en
General
-
Target
9992e25173a67c7aa14d90537379fc6e
-
Size
335KB
-
MD5
9992e25173a67c7aa14d90537379fc6e
-
SHA1
a4be822feb0baef3484515e6e51b0c115bc20f67
-
SHA256
558415461ba35b1030d08f350fc07c2306b7ef833c1d1b0acacd20822bea06e7
-
SHA512
b6a1eb59b6b5b83544cf8e06ec074d2c77cbed5eec46d96dced91421c5355078d1bcf6f734c0c9420c930fc0b2faaeb6cfcb5d77f770533bc9c30c66da2bbcbd
-
SSDEEP
6144:5e2ryXs/1WF/G70kyhzT2jThzQahhuxLLv8qPW7NcAofDb+MxL3118b+JCnJlaNL:5e2r/9XwhzTkThzQ1v8qPWhofLl9AnJU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9992e25173a67c7aa14d90537379fc6e
Files
-
9992e25173a67c7aa14d90537379fc6e.exe windows:4 windows x86 arch:x86
19c0968ab309786bc667e7c2171d1b37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemFree
comctl32
ImageList_SetIconSize
Sections
CODE Size: 301KB - Virtual size: 924KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE